Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137302e38302e3138302e302f32322d3332203d3e20323632373737.roa
File:                     3137302e38302e3138302e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          Aw+xZmwhDD2Z5c/AVAFQVadyMBEJXBhXAtpQVW4V0OU=
Subject key identifier:   E8:9D:BE:C9:FA:1E:A7:E2:AC:60:D9:AE:7C:CA:72:94:86:7F:9A:0F
Certificate issuer:       /CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
Certificate serial:       0B9F3C59516FF1E264CD76F4A297227073F29B98
Authority key identifier: 03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137302e38302e3138302e302f32322d3332203d3e20323632373737.roa
Signing time:             Mon 22 May 2023 16:35:00 +0000
ROA not before:           Mon 22 May 2023 16:30:00 +0000
ROA not after:            Mon 20 May 2024 16:35:00 +0000
asID:                     262777
IP address blocks:        170.80.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:3c:59:51:6f:f1:e2:64:cd:76:f4:a2:97:22:70:73:f2:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Validity
            Not Before: May 22 16:30:00 2023 GMT
            Not After : May 20 16:35:00 2024 GMT
        Subject: CN=E89DBEC9FA1EA7E2AC60D9AE7CCA7294867F9A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:9f:e4:41:ed:4d:bf:8b:44:f3:39:cb:46:
                    c9:26:09:96:86:59:22:4a:4c:4d:ec:e2:9e:e0:c7:
                    2a:8e:7e:00:16:c5:8f:c6:89:b9:fd:f1:8f:fe:64:
                    3b:a6:39:db:2c:e7:fc:bc:5d:02:c5:b1:e1:21:c7:
                    27:ca:6c:d0:26:59:ed:e4:42:f2:b3:88:b3:8b:27:
                    ad:29:de:ff:f4:f9:aa:78:ce:69:f1:3a:dc:b0:ba:
                    38:d8:36:6d:24:6c:e7:9d:ea:ce:f1:db:6e:b1:83:
                    e8:d9:0c:14:be:5b:4f:a7:4f:dd:1d:ad:d1:71:a5:
                    96:bb:dc:90:ff:b8:93:e5:42:ce:6d:b8:a1:f9:3c:
                    ee:11:a1:6d:cc:ae:cf:48:0c:f8:b6:bf:9d:8f:fc:
                    09:f5:84:b5:01:47:a4:f8:91:f6:78:56:f0:4e:4b:
                    ca:2d:f0:e6:b0:89:6b:65:62:e3:df:ea:f3:21:3a:
                    82:49:02:80:0d:c6:b1:c9:6d:e0:a8:a1:0e:26:f4:
                    ae:14:5e:fe:82:34:1f:71:a5:a7:f3:c0:bf:c4:05:
                    6c:12:3b:30:2f:e3:ba:d9:56:6f:08:39:6c:99:ca:
                    70:b0:71:14:39:9f:4b:65:d1:7f:a5:3f:e4:35:29:
                    c6:42:2f:c6:26:50:98:16:e7:2c:4e:75:98:b9:ec:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:BE:C9:FA:1E:A7:E2:AC:60:D9:AE:7C:CA:72:94:86:7F:9A:0F
            X509v3 Authority Key Identifier:
                keyid:03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/3137302e38302e3138302e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:f6:c4:88:5d:9c:50:00:92:ed:4c:7c:74:ed:58:c8:b8:
         2a:23:9a:1b:5b:18:f8:e7:f9:35:ed:7b:20:dc:a7:03:16:e7:
         74:79:5b:87:20:84:b3:47:05:46:41:8e:9b:6d:6f:ce:b1:c7:
         43:33:0a:d4:92:16:e5:1b:57:7a:06:2a:2f:6e:64:c8:2a:02:
         e6:01:d4:e4:30:7e:b3:04:5c:21:92:61:0b:61:e5:7f:aa:1c:
         8c:f4:e4:23:fa:0f:35:7e:bc:89:f4:41:8f:7e:11:b4:2c:bf:
         af:d7:55:f4:ca:32:cf:cb:ee:6b:54:bb:52:aa:0c:41:5c:bf:
         b4:a1:b0:ab:d4:f5:3f:f3:5e:4e:14:8a:b9:47:d0:40:29:a1:
         5b:5d:98:87:3e:f6:a9:56:ce:88:bb:38:0f:3e:06:37:05:f5:
         8b:3d:1b:8f:70:85:b0:e9:7f:63:a8:07:20:43:7b:6f:82:17:
         ee:cc:86:d2:d3:c0:71:6b:a0:a1:b4:aa:42:8c:2a:0b:89:3b:
         f3:51:5a:21:dd:e1:79:ef:00:f9:45:f9:3a:df:14:c0:42:e5:
         1b:af:af:0d:97:82:fd:2a:2d:53:63:6e:58:6b:7b:8a:6a:0b:
         c8:ff:b7:ca:ba:9b:3e:77:04:0d:ad:ae:99:d9:29:87:8e:b1:
         66:6b:e1:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC588WVFv8eJkzXb0opcicHPym5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNFQzg5ODg2OTRBOEFGNUNBMzBDRjExQTgxN0Q1NDhD
RjFGQTAyNDAeFw0yMzA1MjIxNjMwMDBaFw0yNDA1MjAxNjM1MDBaMDMxMTAvBgNV
BAMTKEU4OURCRUM5RkExRUE3RTJBQzYwRDlBRTdDQ0E3Mjk0ODY3RjlBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U5/kQe1Nv4tE8znLRskmCZaG
WSJKTE3s4p7gxyqOfgAWxY/Gibn98Y/+ZDumOdss5/y8XQLFseEhxyfKbNAmWe3k
QvKziLOLJ60p3v/0+ap4zmnxOtywujjYNm0kbOed6s7x226xg+jZDBS+W0+nT90d
rdFxpZa73JD/uJPlQs5tuKH5PO4RoW3Mrs9IDPi2v52P/An1hLUBR6T4kfZ4VvBO
S8ot8OawiWtlYuPf6vMhOoJJAoANxrHJbeCooQ4m9K4UXv6CNB9xpafzwL/EBWwS
OzAv47rZVm8IOWyZynCwcRQ5n0tl0X+lP+Q1KcZCL8YmUJgW5yxOdZi57FFVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6J2+yfoep+KsYNmufMpylIZ/mg8wHwYDVR0j
BBgwFoAUA+yJiGlKivXKMM8RqBfVSM8foCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMS8wM0VDODk4ODY5NEE4QUY1Q0EzMENGMTFBODE3RDU0OENGMUZBMDI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRUM4OTg4Njk0QThBRjVD
QTMwQ0YxMUE4MTdENTQ4Q0YxRkEwMjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzEv
MzEzNzMwMmUzODMwMmUzMTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqULQwDQYJKoZIhvcNAQELBQADggEBAIxP9sSI
XZxQAJLtTHx07VjIuCojmhtbGPjn+TXteyDcpwMW53R5W4cghLNHBUZBjpttb86x
x0MzCtSSFuUbV3oGKi9uZMgqAuYB1OQwfrMEXCGSYQth5X+qHIz05CP6DzV+vIn0
QY9+EbQsv6/XVfTKMs/L7mtUu1KqDEFcv7ShsKvU9T/zXk4UirlH0EApoVtdmIc+
9qlWzoi7OA8+BjcF9Ys9G49whbDpf2OoByBDe2+CF+7MhtLTwHFroKG0qkKMKguJ
O/NRWiHd4XnvAPlF+TrfFMBC5Ruvrw2Xgv0qLVNjblhre4pqC8j/t8q6mz53BA2t
rpnZKYeOsWZr4Vk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org